SOURCES/tftp-c99.patch

@@ -1,50 +0,0 @@
-The glibc headers do not declare bsd_signal by default.  Call signal
-instead, which is the same function as bsd_signal in current glibc.
-
-This fixes implicit function declarations and avoids build issues with
-future compilers.
-
-diff --git a/tftp/main.c b/tftp/main.c
-index fcf5a25ac654954b..7e399d414ca0dd2b 100644
---- a/tftp/main.c
-+++ b/tftp/main.c
-@@ -310,7 +310,7 @@ int main(int argc, char *argv[])
-         sp->s_proto = (char *)"udp";
-     }
- 
--    bsd_signal(SIGINT, intr);
-+    signal(SIGINT, intr);
- 
-     if (peerargc) {
-         /* Set peer */
-@@ -791,7 +791,7 @@ void intr(int sig)
- {
-     (void)sig;                  /* Quiet unused warning */
- 
--    bsd_signal(SIGALRM, SIG_IGN);
-+    signal(SIGALRM, SIG_IGN);
-     alarm(0);
-     siglongjmp(toplevel, -1);
- }
-diff --git a/tftp/tftp.c b/tftp/tftp.c
-index 109848c4f9a5ad4e..d31553be5b76e305 100644
---- a/tftp/tftp.c
-+++ b/tftp/tftp.c
-@@ -85,7 +85,7 @@ void tftp_sendfile(int fd, const char *name, const char *mode)
-     is_request = 1;             /* First packet is the actual WRQ */
-     amount = 0;
- 
--    bsd_signal(SIGALRM, timer);
-+    signal(SIGALRM, timer);
-     do {
-         if (is_request) {
-             size = makerequest(WRQ, name, dp, mode) - 4;
-@@ -191,7 +191,7 @@ void tftp_recvfile(int fd, const char *name, const char *mode)
-     firsttrip = 1;
-     amount = 0;
- 
--    bsd_signal(SIGALRM, timer);
-+    signal(SIGALRM, timer);
-     do {
-         if (firsttrip) {
-             size = makerequest(RRQ, name, ap, mode);

SOURCES/tftp-hpa-0.39-tzfix.patch

@@ -7,10 +7,10 @@ diff -up tftp-hpa-0.49/tftpd/tftpd.c.tzfix tftp-hpa-0.49/tftpd/tftpd.c
  
 +    time_t my_time = 0;
 +    struct tm* p_tm;
-+    char envtz[10];
++    char envtz[22];
 +    my_time = time(NULL);
 +    p_tm = localtime(&my_time);
-+    snprintf(envtz, sizeof(envtz) - 1, "UTC%+d", (p_tm->tm_gmtoff * -1)/3600);
++    snprintf(envtz, sizeof(envtz), "UTC%+ld", (p_tm->tm_gmtoff * -1)/3600);
 +    setenv("TZ", envtz, 0);
 +
      /* basename() is way too much of a pain from a portability standpoint */

SOURCES/tftp-hpa-5.2-covscan.patch

@@ -0,0 +1,242 @@
+# Fix implicit declaration of function 'bsd_signal'; did you mean 'ssignal'?
+#
+# On sufficiently new glibc, signal with defined _DEFAULT_SOURCE is equivalent
+# to bsd_signal.
+--- a/config.h	2022-03-26 01:45:23.602395248 +0100
++++ b/config.h	2022-03-26 01:45:01.076491553 +0100
+@@ -294,9 +294,6 @@
+ void *xrealloc(void *, size_t);
+ char *xstrdup(const char *);
+ 
+-#ifndef HAVE_BSD_SIGNAL
+-void (*bsd_signal(int, void (*)(int))) (int);
+-#endif
+ #ifndef HAVE_DUP2
+ int dup2(int, int);
+ #endif
+--- a/configure.in	2022-03-26 01:56:06.656577548 +0100
++++ b/configure.in	2022-03-26 01:56:04.739068636 +0100
+@@ -160,7 +160,6 @@
+ PA_SEARCH_LIBS_AND_ADD(xmalloc, iberty)
+ PA_SEARCH_LIBS_AND_ADD(xrealloc, iberty)
+ PA_SEARCH_LIBS_AND_ADD(xstrdup, iberty)
+-PA_SEARCH_LIBS_AND_ADD(bsd_signal, bsd, bsdsignal)
+ PA_SEARCH_LIBS_AND_ADD(getopt_long, getopt, getopt_long)
+ PA_SEARCH_LIBS_AND_ADD(getaddrinfo, [nsl resolv])
+ if $pa_add_getaddrinfo
+diff --git a/tftp/main.c b/tftp/main.c
+index b2f9059..d658230 100644
+--- a/tftp/main.c
++++ b/tftp/main.c
+@@ -305,7 +305,7 @@ int main(int argc, char *argv[])
+         sp->s_proto = (char *)"udp";
+     }
+ 
+-    bsd_signal(SIGINT, intr);
++    signal(SIGINT, intr);
+ 
+     if (peerargc) {
+         /* Set peer */
+@@ -768,7 +768,7 @@ void intr(int sig)
+ {
+     (void)sig;                  /* Quiet unused warning */
+ 
+-    bsd_signal(SIGALRM, SIG_IGN);
++    signal(SIGALRM, SIG_IGN);
+     alarm(0);
+     siglongjmp(toplevel, -1);
+ }
+diff --git a/tftp/tftp.c b/tftp/tftp.c
+index d15da22..52f5be0 100644
+--- a/tftp/tftp.c
++++ b/tftp/tftp.c
+@@ -85,7 +85,7 @@ void tftp_sendfile(int fd, const char *name, const char *mode)
+     is_request = 1;             /* First packet is the actual WRQ */
+     amount = 0;
+ 
+-    bsd_signal(SIGALRM, timer);
++    signal(SIGALRM, timer);
+     do {
+         if (is_request) {
+             size = makerequest(WRQ, name, dp, mode) - 4;
+@@ -191,7 +191,7 @@ void tftp_recvfile(int fd, const char *name, const char *mode)
+     firsttrip = 1;
+     amount = 0;
+ 
+-    bsd_signal(SIGALRM, timer);
++    signal(SIGALRM, timer);
+     do {
+         if (firsttrip) {
+             size = makerequest(RRQ, name, ap, mode);
+
+# Fix leaked_handle: Handle variable "fd" going out of scope leaks the handle.
+diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
+index 364e7d2..cbd6093 100644
+--- a/tftpd/tftpd.c
++++ b/tftpd/tftpd.c
+@@ -1505,6 +1505,7 @@ static int validate_access(char *filename, int mode,
+ 
+     if (mode == RRQ) {
+         if (!unixperms && (stbuf.st_mode & (S_IREAD >> 6)) == 0) {
++            close(fd);
+             *errmsg = "File must have global read permissions";
+             return (EACCESS);
+         }
+@@ -1514,6 +1515,7 @@ static int validate_access(char *filename, int mode,
+     } else {
+         if (!unixperms) {
+             if ((stbuf.st_mode & (S_IWRITE >> 6)) == 0) {
++                close(fd);
+                 *errmsg = "File must have global write permissions";
+                 return (EACCESS);
+             }
+@@ -1522,6 +1524,7 @@ static int validate_access(char *filename, int mode,
+ #ifdef HAVE_FTRUNCATE
+ 	/* We didn't get to truncate the file at open() time */
+ 	if (ftruncate(fd, (off_t) 0)) {
++	  close(fd);
+ 	  *errmsg = "Cannot reset file size";
+ 	  return (EACCESS);
+ 	}
+
+# Fix warnings about useless inline in int usage(int)
+From 8ddf0d87d7463c21e28dd2bea6f3f42d4c92cb1d Mon Sep 17 00:00:00 2001
+From: "H. Peter Anvin" <hpa@zytor.com>
+Date: Sat, 7 Jun 2014 13:00:46 -0700
+Subject: [PATCH] tftp: drop "inline" from definition of usage()
+
+It is pointless and newer gcc say it is a lose.
+
+Signed-off-by: H. Peter Anvin <hpa@zytor.com>
+---
+ tftp/main.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/tftp/main.c b/tftp/main.c
+index 1b8a881..b2f9059 100644
+--- a/tftp/main.c
++++ b/tftp/main.c
+@@ -188,7 +188,7 @@ char *xstrdup(const char *);
+ 
+ const char *program;
+ 
+-static inline void usage(int errcode)
++static void usage(int errcode)
+ {
+     fprintf(stderr,
+ #ifdef HAVE_IPV6
+-- 
+2.35.1
+
+# Fix Calling "setsockopt" without checking return value. This library
+# function may fail and return an error code.
+diff --git a/tftpd/recvfrom.c b/tftpd/recvfrom.c
+index d7ef500..e0074d8 100644
+--- a/tftpd/recvfrom.c
++++ b/tftpd/recvfrom.c
+@@ -26,6 +26,7 @@
+ 
+ #if defined(HAVE_RECVMSG) && defined(HAVE_MSGHDR_MSG_CONTROL)
+ 
++#include <syslog.h>
+ #include <sys/uio.h>
+ 
+ #ifdef IP_PKTINFO
+@@ -151,16 +151,19 @@ myrecvfrom(int s, void *buf, int len, unsigned int flags,
+     /* Try to enable getting the return address */
+ #ifdef IP_RECVDSTADDR
+     if (from->sa_family == AF_INET || !from->sa_family)
+-        setsockopt(s, IPPROTO_IP, IP_RECVDSTADDR, &on, sizeof(on));
++        if (setsockopt(s, IPPROTO_IP, IP_RECVDSTADDR, &on, sizeof(on)) == -1)
++            syslog(LOG_ERR, "cannot setsockopt IP_RECVDSTADDR %m");
+ #endif
+ #ifdef IP_PKTINFO
+     if (from->sa_family == AF_INET || !from->sa_family)
+-        setsockopt(s, IPPROTO_IP, IP_PKTINFO, &on, sizeof(on));
++        if (setsockopt(s, IPPROTO_IP, IP_PKTINFO, &on, sizeof(on)) == -1)
++            syslog(LOG_ERR, "cannot setsockopt IP_PKTINFO %m");
+ #endif
+ #ifdef HAVE_IPV6
+ #ifdef IPV6_RECVPKTINFO
+     if (from->sa_family == AF_INET6 || !from->sa_family)
+-        setsockopt(s, IPPROTO_IPV6, IPV6_RECVPKTINFO, &on, sizeof(on));
++        if (setsockopt(s, IPPROTO_IPV6, IPV6_RECVPKTINFO, &on, sizeof(on)) == -1)
++            syslog(LOG_ERR, "cannot setsockopt IPV6_RECVPKTINFO %m");
+ #endif
+ #endif
+     bzero(&msg, sizeof msg);    /* Clear possible system-dependent fields */
+diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
+index 364e7d2..36d6dec 100644
+--- a/tftpd/tftpd.c
++++ b/tftpd/tftpd.c
+@@ -224,7 +224,9 @@ static void pmtu_discovery_off(int fd)
+ #if defined(IP_MTU_DISCOVER) && defined(IP_PMTUDISC_DONT)
+     int pmtu = IP_PMTUDISC_DONT;
+ 
+-    setsockopt(fd, IPPROTO_IP, IP_MTU_DISCOVER, &pmtu, sizeof(pmtu));
++    if (setsockopt(fd, IPPROTO_IP, IP_MTU_DISCOVER, &pmtu, sizeof(pmtu)) == -1)
++        syslog(LOG_ERR, "cannot setsockopt IP_MTU_DISCOVER to "
++                        "IP_PMTUDISC_DONT %m");
+ #endif
+ }
+ 
+# Fixes negative_returns: "fd" is passed to a parameter of pmtu_discovery_off
+# that cannot be negative
+From 0b44159b3a2f51d350f309d3f6d14a17e74e8231 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Zaoral?= <lzaoral@redhat.com>
+Date: Wed, 6 Apr 2022 09:33:33 +0200
+Subject: [PATCH 1/2] tftpd: Correctly disable path MTU discovery in
+ standalone mode
+
+---
+ tftpd/tftpd.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
+index 364e7d2..00fa1cf 100644
+--- a/tftpd/tftpd.c
++++ b/tftpd/tftpd.c
+@@ -769,7 +769,7 @@ int main(int argc, char **argv)
+     }
+ 
+     /* Disable path MTU discovery */
+-    pmtu_discovery_off(fd);
++    pmtu_discovery_off(fdmax);
+ 
+     /* This means we don't want to wait() for children */
+ #ifdef SA_NOCLDWAIT
+-- 
+2.35.1
+
+
+From 5f60355c4bd10b866847a0d58a9582bda7db72aa Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Zaoral?= <lzaoral@redhat.com>
+Date: Wed, 6 Apr 2022 09:34:46 +0200
+Subject: [PATCH 2/2] tftpd: Fix a possible usage of -1 file descriptor in
+ standalone mode
+
+---
+ tftpd/tftpd.c | 7 +++++++
+ 1 file changed, 7 insertions(+)
+
+diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
+index 00fa1cf..afd595d 100644
+--- a/tftpd/tftpd.c
++++ b/tftpd/tftpd.c
+@@ -622,6 +622,13 @@ int main(int argc, char **argv)
+                         exit(EX_USAGE);
+                     }
+                     ai_fam = AF_INET6;
++
++                    if (fd6 < 0) {
++                        syslog(LOG_ERR,
++                               "IPv6 was disabled but address %s is in address "
++                               "family AF_INET6", address);
++                        exit(EX_USAGE);
++                    }
+                 }
+                 break;
+ #endif
+-- 
+2.35.1
+

SOURCES/tftp-hpa-5.2-osh.patch

@@ -1,91 +0,0 @@
-# Fix leaked_handle: Handle variable "fd" going out of scope leaks the handle.
-diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
-index 364e7d2..cbd6093 100644
---- a/tftpd/tftpd.c
-+++ b/tftpd/tftpd.c
-@@ -1505,6 +1505,7 @@ static int validate_access(char *filename, int mode,
- 
-     if (mode == RRQ) {
-         if (!unixperms && (stbuf.st_mode & (S_IREAD >> 6)) == 0) {
-+            close(fd);
-             *errmsg = "File must have global read permissions";
-             return (EACCESS);
-         }
-@@ -1514,6 +1515,7 @@ static int validate_access(char *filename, int mode,
-     } else {
-         if (!unixperms) {
-             if ((stbuf.st_mode & (S_IWRITE >> 6)) == 0) {
-+                close(fd);
-                 *errmsg = "File must have global write permissions";
-                 return (EACCESS);
-             }
-@@ -1522,6 +1524,7 @@ static int validate_access(char *filename, int mode,
- #ifdef HAVE_FTRUNCATE
- 	/* We didn't get to truncate the file at open() time */
- 	if (ftruncate(fd, (off_t) 0)) {
-+	  close(fd);
- 	  *errmsg = "Cannot reset file size";
- 	  return (EACCESS);
- 	}
-
-
-# Patches for negative_returns: "fd" is passed to a parameter of pmtu_discovery_off
-# that cannot be negative
-From 0b44159b3a2f51d350f309d3f6d14a17e74e8231 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Zaoral?= <lzaoral@redhat.com>
-Date: Wed, 6 Apr 2022 09:33:33 +0200
-Subject: [PATCH 1/2] tftpd: Correctly disable path MTU discovery in
- standalone mode
-
----
- tftpd/tftpd.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
-index 364e7d2..00fa1cf 100644
---- a/tftpd/tftpd.c
-+++ b/tftpd/tftpd.c
-@@ -769,7 +769,7 @@ int main(int argc, char **argv)
-     }
- 
-     /* Disable path MTU discovery */
--    pmtu_discovery_off(fd);
-+    pmtu_discovery_off(fdmax);
- 
-     /* This means we don't want to wait() for children */
- #ifdef SA_NOCLDWAIT
--- 
-2.35.1
-
-
-From 5f60355c4bd10b866847a0d58a9582bda7db72aa Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Zaoral?= <lzaoral@redhat.com>
-Date: Wed, 6 Apr 2022 09:34:46 +0200
-Subject: [PATCH 2/2] tftpd: Fix a possible usage of -1 file descriptor in
- standalone mode
-
----
- tftpd/tftpd.c | 7 +++++++
- 1 file changed, 7 insertions(+)
-
-diff --git a/tftpd/tftpd.c b/tftpd/tftpd.c
-index 00fa1cf..afd595d 100644
---- a/tftpd/tftpd.c
-+++ b/tftpd/tftpd.c
-@@ -622,6 +622,13 @@ int main(int argc, char **argv)
-                         exit(EX_USAGE);
-                     }
-                     ai_fam = AF_INET6;
-+
-+                    if (fd6 < 0) {
-+                        syslog(LOG_ERR,
-+                               "IPv6 was disabled but address %s is in address "
-+                               "family AF_INET6", address);
-+                        exit(EX_USAGE);
-+                    }
-                 }
-                 break;
- #endif
--- 
-2.35.1
-

SPECS/tftp.spec

@@ -3,8 +3,8 @@
 Summary: The client for the Trivial File Transfer Protocol (TFTP)
 Name: tftp
 Version: 5.2
-Release: 47%{?dist}
-License: BSD-4-Clause-UC
+Release: 37%{?dist}
+License: BSD
 URL: http://www.kernel.org/pub/software/network/tftp/
 Source0: http://www.kernel.org/pub/software/network/tftp/tftp-hpa/tftp-hpa-%{version}.tar.bz2
 Source1: tftp.socket
@@ -21,9 +21,8 @@ Patch8: tftp-hpa-5.2-pktinfo.patch
 Patch9: tftp-doc.patch
 Patch10: tftp-enhanced-logging.patch
 Patch11: tftp-hpa-5.2-gcc10.patch
-Patch12: tftp-off-by-one.patch
-Patch13: tftp-c99.patch
-Patch14: tftp-hpa-5.2-osh.patch
+Patch12: tftp-rewrite-macro.patch
+Patch13: tftp-hpa-5.2-covscan.patch
 
 BuildRequires: autoconf
 BuildRequires: gcc
@@ -65,14 +64,12 @@ systemd socket activation, and is disabled by default.
 %patch9 -p1 -b .doc
 %patch10 -p1 -b .logging
 %patch11 -p1 -b .gcc10
-%patch12 -p1 -b .off-by-one
-%patch13 -p1
-%patch14 -p1 -b .osh
+%patch12 -p1 -b .rewrite-macro
+%patch13 -p1 -b .covscan
 
 %build
 autoreconf
 %configure
-touch aconfig.h.in aconfig.h MCONFIG
 make %{?_smp_mflags}
 
 %install
@@ -110,54 +107,25 @@ install -p -m 644 %SOURCE2 ${RPM_BUILD_ROOT}%{_unitdir}
 %{_unitdir}/*
 
 %changelog
-* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 5.2-47
-- Bump release for June 2024 mass rebuild
+* Wed Apr 06 2022 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
+- Review and fix issues reported by static analysers (rhbz#2069613)
+- Use systemd-rpm-macros and modernise the specfile a bit
+  - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
+    Thanks a lot!
 
-* Wed May 15 2024 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-46
-- gating enablement rebuild (RHEL-25853)
+* Wed Mar 23 2022 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
+- Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
+- Fix memory corruption in tftpd when filename remapping with macro \x
+  is used (rhbz#2066858)
 
-* Tue May 14 2024 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-45
-- gating enablement rebuild (RHEL-25853)
+* Thu Jan 27 2022 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-35
+- Rebuilt for fixed gating.yaml. Related rhbz#2042975
 
-* Mon May 06 2024 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-44
-- gating enablement rebuild (RHEL-25853)
+* Thu Jan 27 2022 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-34
+- Rebuilt for added gating.yaml. Related rhbz#2042975
 
-* Fri Apr 05 2024 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-43
-- apply fixes to true positives reported by static analyzers from RHEL 9 (RHEL-25853)
-
-* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-42
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
-
-* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-41
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Mon Apr 24 2023 Lukáš Zaoral <lzaoral@redhat.com> - 5.2-40
-- migrate to SPDX license format
-
-* Sun Feb 05 2023 Florian Weimer <fweimer@redhat.com> - 5.2-39
-- Fix C99 compatibility issue (#2148911)
-
-* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-38
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-37
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Tue Mar 29 2022 Dominik Mierzejewski <dominik@greysector.net> - 5.2-36
-- fix the --mapfile/--map-file discrepancy in the manual page (Lukáš Zaoral)
-- fix off-by-one reads and writes when filename remapping with macro \x is used
-  (Lukáš Zaoral)
-- use correct dependency for systemd rpm macros and sort deps alphabetically
-
-* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-35
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-34
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
-
-* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.2-33
-- Rebuilt for updated systemd-rpm-macros
-  See https://pagure.io/fesco/issue/2583.
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 5.2-33
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
 
 * Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-32
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild